Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/5AytXKqz7C7BMo25kBqCzNiaoFGNJ8RaJnT3cpbead1w/0/59705EC4540FCB5C4C3398C5820B274B6548892F.mft
File:                     59705EC4540FCB5C4C3398C5820B274B6548892F.mft (raw, json)
Hash identifier:          rInGqwxVSTPI1GuMRUU56mZFZi9Orj/+vGvTZE0qacY=
Subject key identifier:   91:C3:88:43:A0:1C:1E:26:35:34:47:78:FA:47:07:8F:1E:53:8B:2E
Authority key identifier: 59:70:5E:C4:54:0F:CB:5C:4C:33:98:C5:82:0B:27:4B:65:48:89:2F
Certificate issuer:       /CN=59705EC4540FCB5C4C3398C5820B274B6548892F
Certificate serial:       6B783D7FF620652A6FE39EC4BC7B24405E1CF4B2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/59705EC4540FCB5C4C3398C5820B274B6548892F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5AytXKqz7C7BMo25kBqCzNiaoFGNJ8RaJnT3cpbead1w/0/59705EC4540FCB5C4C3398C5820B274B6548892F.mft
Manifest number:          016D
Signing time:             Fri 31 Jan 2025 11:58:22 +0000
Manifest this update:     Fri 31 Jan 2025 11:53:22 +0000
Manifest next update:     Sat 01 Feb 2025 15:39:22 +0000
Files and hashes:         1: 323830343a373937303a3a2f33322d3333203d3e20323731333035.roa (hash: 7MsQpJ+uVX6NmPGl8m68MUn8MwN0ipXC6wTstv+M9yQ=)
                          2: 59705EC4540FCB5C4C3398C5820B274B6548892F.crl (hash: n0YYHmR57urGKIYvVRLMCXxGYFAs2qgDcgWsO1/i+5o=)
                          3: 3137372e3132342e38302e302f32322d3234203d3e20323731333035.roa (hash: M0ofn+iYtqdL0ePQwgHtwSHu4QcHynTB9IugTEKpuu0=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:78:3d:7f:f6:20:65:2a:6f:e3:9e:c4:bc:7b:24:40:5e:1c:f4:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=59705EC4540FCB5C4C3398C5820B274B6548892F
        Validity
            Not Before: Jan 31 11:53:22 2025 GMT
            Not After : Feb  1 15:39:22 2025 GMT
        Subject: CN=91C38843A01C1E2635344778FA47078F1E538B2E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:b2:9e:94:8c:b2:63:74:a4:c2:e7:ac:40:74:
                    fa:a9:ca:37:7c:0c:8c:97:2e:77:8e:33:89:5a:42:
                    b6:ea:a4:32:e1:6c:40:8a:77:4e:45:5f:0a:28:11:
                    21:ab:18:fa:29:be:11:91:96:5d:f0:5f:ba:07:3c:
                    d3:07:3c:44:52:1f:82:66:f6:36:55:4b:fd:4c:58:
                    76:73:0e:00:54:12:65:6b:b1:e5:b7:e2:dd:7a:9a:
                    67:4f:22:b8:5f:13:93:24:35:e5:0d:2d:0c:48:61:
                    c4:6b:1f:64:d5:8f:d8:44:5d:06:19:9b:cd:54:78:
                    fa:85:0f:dd:2d:49:a4:a7:f5:2c:f6:c1:dc:51:a6:
                    1b:1f:25:86:45:80:36:8f:34:f7:2d:1a:37:ea:a5:
                    2f:f3:95:17:b2:ea:1c:04:82:e3:ca:a9:d3:53:e5:
                    15:0c:bb:3d:b4:07:9c:24:d0:6f:23:48:7b:dc:50:
                    67:97:d6:b3:ec:1b:2a:b7:c3:0c:c4:2e:8f:96:24:
                    95:40:b0:07:2b:41:90:71:5d:36:14:51:c5:53:db:
                    71:43:0e:ea:e5:32:49:43:4f:b0:0c:cc:ed:51:3e:
                    9c:b6:9e:a2:28:30:44:87:b3:f7:4e:51:e3:38:ab:
                    98:36:05:b2:2b:16:74:f5:e0:21:1d:a0:0e:c6:f5:
                    93:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:C3:88:43:A0:1C:1E:26:35:34:47:78:FA:47:07:8F:1E:53:8B:2E
            X509v3 Authority Key Identifier:
                keyid:59:70:5E:C4:54:0F:CB:5C:4C:33:98:C5:82:0B:27:4B:65:48:89:2F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5AytXKqz7C7BMo25kBqCzNiaoFGNJ8RaJnT3cpbead1w/0/59705EC4540FCB5C4C3398C5820B274B6548892F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/59705EC4540FCB5C4C3398C5820B274B6548892F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5AytXKqz7C7BMo25kBqCzNiaoFGNJ8RaJnT3cpbead1w/0/59705EC4540FCB5C4C3398C5820B274B6548892F.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8c:9e:0f:50:74:ec:c2:24:b5:c2:25:03:28:b7:ef:87:b6:21:
         d7:b1:7a:db:27:5a:3f:0a:11:57:fb:23:fd:41:a4:c8:55:9c:
         3c:3d:ab:ff:91:fd:44:51:a1:49:a9:5e:57:06:15:51:b3:9d:
         8f:83:1a:67:26:23:45:3e:2f:10:30:1c:f0:f2:cf:50:11:e2:
         f3:61:ba:0f:62:cb:71:01:49:ab:f6:bd:2c:97:d8:98:5d:6e:
         87:91:0d:44:e4:9b:0c:ab:79:ff:37:76:26:bf:7d:37:9c:fb:
         27:17:59:a9:00:3d:9b:9b:fb:71:17:17:19:77:a9:cf:2b:14:
         d3:78:14:8b:e7:2f:f7:33:15:a9:3a:75:d8:de:14:df:ec:05:
         67:47:fd:ef:de:79:15:b2:c0:8e:85:a7:c0:48:90:d3:6d:40:
         a3:3f:71:91:d9:1f:65:3f:0d:0a:a3:50:5d:66:60:fe:02:c0:
         55:cd:8a:fe:f8:2c:5c:49:c6:63:b1:7d:95:af:31:a4:53:ef:
         2f:a5:80:46:cb:b3:fc:2f:4c:c0:09:28:51:0d:f3:6d:02:c7:
         2f:de:4c:8e:b7:d0:41:86:5a:de:2d:71:99:a2:d0:1d:12:e0:
         38:86:d4:12:eb:a6:c1:85:3b:52:af:12:41:1d:6e:c5:44:93:
         20:4d:64:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 07:59:47 2025 by rpki-client